Vulnerability Management

o Perform regular vulnerability assessments on network devices (routers, switches, firewalls, load balancers).
o Conduct network security scans using tools like Nessus, Qualys, Rapid7, OpenVAS.
o Analyze scan results and prioritize vulnerabilities based on severity and business impact.
o Work with network and infra teams to remediate vulnerabilities and track closure.
o Perform configuration reviews & hardening as per CIS/NIST standards.
o Support penetration testing activities (internal/external).
o Monitor and respond to security alerts and incidents related to network vulnerabilities.
o Maintain vulnerability reports, dashboards, and compliance documentation.
o Ensure adherence to security frameworks (ISO 27001, PCI-DSS, NIST).
o Automate vulnerability scanning and reporting where possible.
o Participate in risk assessments and audit activities.
Enterprise Networking
? Strong fundamentals and hands on experience with:
o Routing & Switching (BGP, OSPF, VLANs)
o Enterprise WAN and branch networking
? Experience with Cisco LAN / Switching / Wireless for branch and campus environments
o Understanding of QoS design for voice, video, and critical applications

? Experience : 8-10 years in Network Security/ vulnerability management.

Key Responsibilities:
Prisma SD WAN (Core Focus)
? Hands on expertise in Palo Alto Prisma SD WAN architecture, including:
o ION devices (branch, DC, cloud)
o Controllers, management portals, and analytics
? Design and implement application aware path selection, SLA based policies, and intelligent link steering
? Configure and optimize traffic failover, load balancing, and link remediation
? Perform pilot implementations and large scale SD WAN rollouts
? Lead migration from legacy WAN / MPLS to SD WAN, ensuring minimal business impact
? Troubleshoot complex SD WAN performance and stability issues

Security & SASE Integration
? Integrate Prisma SD WAN with Palo Alto NGFW for unified security enforcement
? Experience with Fortinet / FortiGate firewalls in hybrid environments
? Exposure to SASE architectures, including:
o Zscaler (ZIA / ZPA) and/or Netskope
? Solid understanding of Zero Trust access models
? Knowledge of cloud delivered security enforcement and secure internet breakout designs

Required certifications:
? Palo Alto certifications (PCNSE / Prisma SD WAN)
? Cisco certifications (CCNP / Meraki specific exposure)
? Experience in SASE/SSE transformation programs